Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File:                     GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier:          GebQ1I2Yna4dZc/BB13is0cFcXBZmBeP27iRBTmKDz0=
Subject key identifier:   0E:BB:DA:7A:3E:DE:C1:C9:2A:A1:F1:1E:F9:47:ED:08:99:7F:47:5B
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer:       /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial:       0458
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number:          0456
Signing time:             Fri 24 Jul 2026 03:36:43 +0000
Manifest this update:     Fri 24 Jul 2026 03:36:42 +0000
Manifest next update:     Sun 26 Jul 2026 03:36:42 +0000
Files and hashes:         1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: CyuVqHBDv3q6u3HyzYLEHyFxXMtc4RONryKBW089PLI=)
                          2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
        Validity
            Not Before: Jul 24 03:36:42 2026 GMT
            Not After : Jul 26 03:36:42 2026 GMT
        Subject: CN=6a62ddcb-20f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:0f:79:fd:0f:9b:ba:ab:74:0d:7e:76:37:
                    2e:d8:b4:4b:17:1d:7e:4b:20:be:e2:e4:e9:88:04:
                    5a:8a:cd:9d:21:73:3d:bd:ac:84:d9:aa:e7:60:52:
                    2a:0f:dc:e6:8b:d0:0e:43:c0:e7:74:77:0a:d1:97:
                    b9:78:0c:a5:e4:6c:ee:04:69:6a:1b:7c:cf:bf:a3:
                    cb:6f:a7:f6:5a:b2:22:54:78:db:1e:43:ca:92:e0:
                    13:26:cf:f4:86:02:3c:15:e6:8d:06:33:a8:67:46:
                    d7:43:26:fc:ff:60:0f:9d:e3:fa:5d:09:b5:93:fe:
                    98:b7:fd:4f:95:d0:fa:9f:33:61:b7:43:16:43:75:
                    2e:d0:3b:f4:b1:56:39:33:8b:fd:12:ca:f1:5b:6e:
                    db:51:6c:70:2d:59:8d:8b:c8:bd:77:ac:7d:c5:e6:
                    40:79:63:d5:95:6a:9b:94:bc:92:8b:ea:19:1a:41:
                    a1:42:fd:86:83:2b:fe:e1:8a:2c:3a:bf:15:9b:de:
                    01:fa:bf:d2:c0:cf:19:ac:30:05:0a:8a:90:b5:82:
                    b0:6c:9f:66:d4:d3:55:e1:5c:40:2d:98:cd:1e:93:
                    fa:9a:dd:81:91:5c:e9:28:c6:2b:12:f6:91:7c:da:
                    e1:6c:0c:ea:d9:61:d3:80:e8:01:5f:51:4a:29:42:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BB:DA:7A:3E:DE:C1:C9:2A:A1:F1:1E:F9:47:ED:08:99:7F:47:5B
            X509v3 Authority Key Identifier:
                keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:1a:33:74:ab:df:56:6d:24:da:a5:0f:09:42:90:2a:b8:
         22:ec:aa:c9:a7:8a:82:50:e9:90:73:27:8c:50:5a:32:ef:59:
         9a:c5:70:7e:16:2a:30:35:d2:f8:ab:45:2a:e5:f8:4d:f9:6d:
         57:39:9b:5c:fa:87:b7:99:18:c0:99:84:f5:43:b3:f3:fc:4d:
         5a:3d:cf:56:64:6a:ce:bf:8a:b3:ee:c3:49:be:9e:d7:05:71:
         65:ed:82:75:7d:6e:ff:fb:02:92:de:42:e6:f2:c5:b1:14:ad:
         75:c2:35:4c:1d:e3:e9:20:d3:69:ef:96:16:6f:8b:56:2e:d0:
         ff:6a:3e:91:d8:6e:a1:12:ba:01:4f:74:f1:79:db:b0:a3:f0:
         8b:69:4f:61:b5:d6:51:26:01:e3:74:97:d2:19:ca:59:f8:a5:
         ec:43:1a:7a:01:d5:b6:f8:4b:44:de:62:10:1c:d6:e3:8b:3a:
         07:32:01:2b:19:50:50:29:ac:3f:89:5a:e8:29:79:4a:f0:b6:
         72:24:fc:2b:2b:bf:98:a3:55:5d:ee:6d:79:0b:5d:b6:e1:ec:
         f3:fa:fa:38:12:51:03:93:1b:bf:ad:64:47:4e:75:04:ce:b8:
         be:f7:7e:2e:07:16:48:92:3d:96:28:cb:bd:cf:d9:bc:a0:7b:
         51:a9:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:40 2026 by rpki-client